able-camera-57198
11/02/2021, 7:10 PMgoogle_service_networking_connection
?billions-ambulance-7516
11/03/2021, 1:17 AMalert-planet-55552
11/05/2021, 10:05 AMgcp:impersonateServiceAccount: <mailto:res-admin@REDACTED-PROJECT.iam.gserviceaccount.com|res-admin@REDACTED-PROJECT.iam.gserviceaccount.com>
google-native:impersonateServiceAccount: <mailto:res-admin@REDACTED-PROJECT.iam.gserviceaccount.com|res-admin@REDACTED-PROJECT.iam.gserviceaccount.com>
but it is unable to retrieve the access token:
error: Native: rpc error: code = Unknown desc = invocation of google-native:cloudresourcemanager/v3:getFolder returned an error: error sending request: impersonate: unable to generate access token: Post "https:// <http://iamcredentials.googleapis.com/v1/projects/-/serviceAccounts/res-admin@REDACTED-PROJECT.iam.gserviceaccount.com:generateAccessToken|iamcredentials.googleapis.com/v1/projects/-/serviceAccounts/res-admin@REDACTED-PROJECT.iam.gserviceaccount.com:generateAccessToken>": context canceled
# debug log shows it's a reset but this is not a networking issue because it is repeatable (and works via gcloud)
... eventsink.go:86] eventSink::Error(<{%reset%}>
However, this works with the Classic provider and also using gcloud:
❯ gcloud resource-manager folders describe 163783803528 --impersonate-service-account=res-admin@REDACTED-PROJECT.iam.gserviceaccount.com
WARNING: This command is using service account impersonation. All API calls will be executed as [res-admin@REDACTED-PROJECT.iam.gserviceaccount.com].
WARNING: This command is using service account impersonation. All API calls will be executed as [res-admin@REDACTED-PROJECT.iam.gserviceaccount.com].
createTime: '2021-06-16T13:59:02.491Z'
...
Minimal Go code attached. Any ideas as to what's going wrong?fresh-processor-9973
11/05/2021, 12:19 PMfresh-processor-9973
11/05/2021, 12:19 PMable-camera-57198
11/05/2021, 1:22 PMvar computeService = new Service(
"compute",
options: new() {
Parent = this,
},
args: new ServiceArgs
{
ServiceName = "<http://compute.googleapis.com|compute.googleapis.com>",
}
);
var defaultNetwork = Output.Create(GetNetwork.InvokeAsync(new()
{
Network = "default",
}));
Is there any way for me to have the call to GetNetwork
depend on computeService
? Right now GCP is giving me an error because I'm trying to call GetNetwork
prior to the API for it being enabled...fast-arm-63150
11/08/2021, 10:02 PMfast-arm-63150
11/08/2021, 10:02 PMplain-potato-84679
11/09/2021, 8:56 AMeager-pillow-75917
11/09/2021, 11:04 AMeager-pillow-75917
11/09/2021, 11:04 AMeager-pillow-75917
11/09/2021, 11:04 AMid This property is required. - The unique provider ID of the resource to lookup.
eager-pillow-75917
11/09/2021, 11:28 AMeager-pillow-75917
11/09/2021, 11:29 AMexport const geodudeTestInstance = gcp.sql.DatabaseInstance.get(<NAME>, <ID>, ...);
eager-pillow-75917
11/09/2021, 11:29 AMerror: Preview failed: resource '<ID>' does not exist
victorious-tiger-25684
11/10/2021, 7:48 PMbrief-xylophone-82066
11/10/2021, 11:23 PMcompute/SharedVpc{Host,Service}Project
, but I’m trying to get as far as I can with the native provider since the docs recommend using it for new projects. If the answer is that it doesn’t really exist yet that’s fine, I’m just trying to confirm that I’m not simply missing it in the API docs anywhere.square-lunch-33033
11/15/2021, 4:26 PMgcloud auth activate-service-account…
I looked at my config, and auth stuffs, but pulumi is still trying to run under an old and different GCP service account it seems:
* googleapi: Error 403: [account name]@appspot.gserviceaccount.com does not have storage.buckets.create access to the Google Cloud project., forbidden
tall-photographer-1935
11/16/2021, 3:26 PMRouterNat
type? I've tried compute.Router.RouterNat
to no avail..https://www.pulumi.com/registry/packages/google-native/api-docs/compute/v1/router/#routernatbest-summer-38252
11/17/2021, 6:50 AMgcloud services enable my-consumed-service
but with the google-native provider?eager-thailand-33661
11/18/2021, 11:44 AMfast-easter-23401
11/19/2021, 8:32 PMimport
arg from the CustomResourceOptions
interface (we're using ts). In order to do so, I need to retrieve the cluster ID, which I got already, but for some reason the google-native
complains that the resource doesn't exist. The classic api works like a charm using the $PROJECT_ID/$LOCATION/$CLUSTER_NAME
naming convention for IDs. My tech-lead, though, suggests that we should use the google-native
api instead. So my question is: do you guys know what the API expects to receive to identify the resource by its ID? So far I tried the following possibilities:
• v1/projects/$PROJECT_ID/locations/$LOCATION/clusters/$CLUSTER_NAME
• projects/$PROJECT_ID/locations/$LOCATION/clusters/$CLUSTER_NAME
• $PROJECT_ID/$LOCATION/$CLUSTER_NAME
Thank you so much for your time. I wish y'all a nice day.fancy-caravan-31881
11/23/2021, 5:01 PMconst cluster = new gcp.container.Cluster("mygke", {
...
...
enableAutopilot: true,
initialNodeCount: 1,
nodeConfig: {
machineType: "n2d-standard-2",
oauthScopes: [
...
],
},
...
...
});
But I can’t define a nodeConfig
in the new google-native library and the nodePools
in not very clear to me because and still mentions nodeConfig
and initialNodeCount
which are no longer input properties anymore: https://www.pulumi.com/registry/packages/google-native/api-docs/container/v1/cluster/#nodepools_nodejs
Does anyone here have any experience with GKE Autopilot and new google-native library?
EDIT: as it stands, I can create a Autopilot cluster with no nodesable-camera-57198
11/23/2021, 10:56 PMYou do not appear to have access to project
I'm using a service account (have been able to access other buckets with it) on my CI machine, so I know it definitely has permission to work with resources inside of the project. For some reason though, Pulumi thinks it doesn't... Any possible causes for this error? Is there a list of permissions the Pulumi GCP driver expects to have?fancy-caravan-31881
11/24/2021, 4:53 PMfast-easter-23401
11/24/2021, 7:26 PMerror: Preview failed: importing <bucket-resource-name>/roles/storage.objectCreator: Wrong number of parts to Binding id [<bucket-resource-name>/roles/storage.objectCreator]; expected 'resource_name role [condition_title]'.
I tried so far with <bucket_name>
, b/<bucket_name>
, <project-id>/<bucket-name>
, and <project-id>/b/<bucket-name>
but I got the same error regardless. Any ideas?quick-painter-61380
11/29/2021, 3:22 PMquick-painter-61380
11/29/2021, 3:34 PMpulumi import google-native:storage/v1:Bucket <bucket name> <bucket name>
causes it to fail with Preview failed: resource '<bucket name>' does not exist
quick-painter-61380
11/29/2021, 3:39 PMID
but it's not clear to me what it should be. The name seemed like it would be fine since they are global unique but no dice. I also tried an ID like <https://www.googleapis.com/storage/v1/b/><bucket name>
since I see something similar for the newly created bucket when I pulumi stack -i
but that also doesn't work.cuddly-father-4905
11/29/2021, 5:32 PMgoogle-native
package?
I wasn't sure if the fact that it's in preview means "we're still adding all of the resources" or "all of the resources are there and we're just battle-testing things now"